CUPS has its own access controls, much like
those in Apache.  They are in the file
/etc/cups/cupsd.conf and by default they
limit access to the administrative interface
to the local machine.  See the <Location /admin>
clauses in cupsd.conf.

In my distribution, Red Hat Fedora Core 1,
access to the printers is also limited to
the local machine.  To share the printer
"lp" say

<Location /printers/lp>
 Order Deny,Allow
 Deny From All
 Allow From 1.2.3.0/24   # Network of your local LAN interface
 AuthType None
</Location>

Browsing On
BrowseProtocols cups
BrowseAddress 1.2.3.255   # Broadcast address for your LAN interface
BrowseAllow from 1.2.3.0/24  # Network of your LAN interface

If you only have a small LAN where everyone
is trusted (ie, home) you might want to say

<Location />
...
Order Deny,Allow
Deny From All
Allow From 1.2.3.0/24
</Location>

CUPS is a marvellous printing system, but it is really
designed to crack the corporate printing nut and it
shows.  The GUIs like redhat-config-printer are meant
to hide that from you, but it sounds like your distro
isn't doing a great job of that.

Cheers,
Glen

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to